I have an app where items are shared with team members, and we use the setting that allows those team members to view those records in the table layout. I see that they have the ability to delete records individually, however when they try to use the bulk delete option from the table view, I see this error in the console:
Actor with id {id} and type USER has invalid permission to access blabDef {blabDef}
I think if the user has permissions to delete an individual record, they should also have access to use the bulk delete. Or if not, they should at least receive an error message stating they do not have that permission level. Currently the user receives no feedback at all so it isn’t clear that something has gone wrong.
thank you very much for the detailed report and for raising this so clearly
We did find the issue. With the permission setting Anyone with shared content, where users do not have explicit app access but can see the app through shared records, some interactions were still incorrectly checking for app-level permissions. This affected things like editing and bulk actions.
We have now reviewed and fixed this across all relevant interactions. This was not limited to guests only, but could also affect organization members. With the fix in place, all user groups using this permission setting should now have the same experience as users with native app access.
Thanks again for flagging this, and have a great day!
